--- title: "Connect Aws Guardduty to capture - APIANT.ai" description: "When \"New Finding\" fires in Aws Guardduty, your agent runs \"Add capture\" in capture." canonical: "https://apiant.ai/connect/aws-guardduty-to-capture" --- # Connect Aws Guardduty to capture When **New Finding** fires in [Aws Guardduty](https://apiant.ai/connections/aws-guardduty), your agent runs **Add capture** in [capture](https://apiant.ai/connections/capture). Describe the whole flow and it is built, tested on every scenario and kept running. Aws Guardduty **1** trigger capture **1** trigger capture **1** action What the catalog holds today. Ask for anything missing and your agent reads the API documentation and adds it. ## What do you want Aws Guardduty and capture to do together? Give your AI client this address. `https://mcp.apiant.ai` One connection does both: ask your client to act in an app once, or have it build an automation that keeps running. Any client that takes a remote MCP server. Nothing to install. Create your free account, then sign in once in your browser. ### Set it up in your client ### Claude Code Run this in the directory you want to work in. `claude mcp add --transport http -s project apiant-ai https://mcp.apiant.ai` Start Claude Code there, approve the server, and sign in in the browser page it opens. [Claude Code guide (opens in a new tab)](https://apiant.ai/docs/mcp/claude-code) ### Claude, web and desktop Open Customize, then Connectors, then Add custom connector, and paste the address. On Team and Enterprise an owner adds it first. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Cursor Add the address to your MCP configuration as a server URL. Cursor signs you in in your browser. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Zed Open Settings, then AI, then MCP Servers, then Add Server, then Add Remote Server. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Codex and the ChatGPT desktop app Open Settings, then MCP servers, then Add server, and choose Streamable HTTP. From the terminal, Codex takes the address with its own add command and then signs you in. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Any other MCP client Paste the address where the client asks for a remote MCP server URL, and name the server apiant-ai where it lets you. APIANT's skills reach the client over the same connection. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) Example flows ## What Aws Guardduty can start in capture - When **New Finding** in Aws Guardduty then **Add capture** in capture Starting points drawn from the triggers and actions in the catalog today. Describe the flow you need, at any depth, and your agent builds it and tests every scenario before it ships. Everything your agent can do with Aws Guardduty and capture ## Triggers and actions 2 triggers · 1 action - Trigger **New Finding** Triggers when GuardDuty reports a new security finding, such as suspicious network activity or compromised credentials. - Trigger **New Capture** Triggers when a new item is saved to your capture library. - Action **Add capture** Create a new capture. ## Each app on its own - [ **Aws Guardduty** Threat detection service that monitors AWS accounts for malicious activity and anomalous behavior using...](https://apiant.ai/connections/aws-guardduty) - [ **capture** capture is a service that is your AI's long-term memory.](https://apiant.ai/connections/capture) Reviews ## What our customers say ## More from Aws Guardduty - [ **Aws Guardduty to HubSpot** HubSpot is your all-in-one stop for all of your marketing software needs.](https://apiant.ai/connect/aws-guardduty-to-hubspot) - [ **Aws Guardduty to Salesforce** Salesforce is a leading enterprise customer relationship management (CRM) platform.](https://apiant.ai/connect/aws-guardduty-to-salesforce) - [ **Aws Guardduty to Slack** Slack is a messaging platform for teams. Post messages, manage channels, users, reminders, and react to...](https://apiant.ai/connect/aws-guardduty-to-slack) - [ **Aws Guardduty to Google Sheets** Google Sheets is Google's online spreadsheet app for creating, editing and sharing spreadsheets.](https://apiant.ai/connect/aws-guardduty-to-google-sheets) - [ **Aws Guardduty to Gmail** Gmail is Google’s email service, featuring spam protection, search functions, and seamless integration with...](https://apiant.ai/connect/aws-guardduty-to-gmail) - [ **Aws Guardduty to Google Calendar** Google Calendar is a time management tool providing scheduling features, event reminders, and integration...](https://apiant.ai/connect/aws-guardduty-to-google-calendar) ## More into capture - [ **Felt to capture** Cloud-based GIS platform for creating interactive maps and dashboards from geospatial and database data.](https://apiant.ai/connect/felt-to-capture) - [ **Google Calendar to capture** Google Calendar is a time management tool providing scheduling features, event reminders, and integration...](https://apiant.ai/connect/google-calendar-to-capture) - [ **ActiveCampaign to capture** ActiveCampaign is a marketing automation, email marketing, and CRM platform.](https://apiant.ai/connect/activecampaign-to-capture) - [ **Airtable to capture** Organize anything with Airtable, a modern database created for everyone.](https://apiant.ai/connect/airtable-to-capture) - [ **Trello to capture** Trello is a visual collaboration tool that organizes projects into boards, lists, and cards.](https://apiant.ai/connect/trello-to-capture) - [ **Asana to capture** Asana is a collaborative information manager for workspace.](https://apiant.ai/connect/asana-to-capture) Questions ## Aws Guardduty and capture, answered ### ### What can start an automation from Aws Guardduty? Any of Aws Guardduty's 1 trigger in the catalog, including New Finding. Describe the moment in plain language and your agent picks the right one. ### ### What can your agent do in capture when something happens in Aws Guardduty? Any of capture's 1 action, including Add capture. Your agent maps the data both ways and tests every scenario before it ships. ### ### Can it also run from capture to Aws Guardduty? capture has no triggers in the catalog today, so automations start in Aws Guardduty. If you need the other direction, ask: your agent reads capture's API documentation and adds it. ### ### Do I have to build a connector for Aws Guardduty or capture? No. Both are in the catalog with their triggers and actions. You describe the automation; your agent builds it, tests every scenario and keeps it running. ### ### Can my AI client use Aws Guardduty and capture without building an automation? Yes. With your AI client connected to APIANT, ask it to do something in capture once and it runs that action on the spot. Ask for an automation and your agent builds it, tests every scenario and keeps it running. One connection covers both. ### ### What happens when something fails? Your agent works that out for you. It plans the failure paths along with the happy path, then tests every scenario before it ships. ### ### Is there a free plan? Yes. Every plan includes the agent, including free, and building from your own AI client spends no assistant credits.